Add Immich to roles

playbook.yml

@@ -25,6 +25,7 @@
     - role: wedding
     - role: changedetection
     - role: monitoring
+    - role: immich
   vars:
     # devsec.hardening.ssh_hardening vars:
     ssh_client_port: 22 # Default, but duplicated here for documentation purpose. Not changed because its only accessible via LAN.

roles/immich/tasks/main.yml

@@ -0,0 +1,22 @@
+---
+- name: Create the compose project directory
+  ansible.builtin.file:
+    path: "/home/{{ ansible_user_id }}/immich"
+    state: directory
+    owner: "{{ ansible_user_id }}"
+    mode: '0744'
+- name: Download the Immich Dockerfile
+  ansible.builtin.get_url:
+    url: https://github.com/immich-app/immich/releases/latest/download/docker-compose.yml
+    dest: "/home/{{ ansible_user_id }}/immich/docker-compose.yml"
+    mode: '0755'
+- name: Create the .env file
+  ansible.builtin.template:
+    src: .env.j2
+    dest: "/home/{{ ansible_user_id }}/immich/.env"
+    owner: "{{ ansible_user_id }}"
+    mode: '0644'
+- name: Create and start services
+  become: true
+  community.docker.docker_compose_v2:
+    project_src: "/home/{{ ansible_user_id }}/immich/"

roles/immich/templates/.env.j2

@@ -0,0 +1,21 @@
+# You can find documentation for all the supported env variables at https://immich.app/docs/install/environment-variables
+
+# The location where your uploaded files are stored
+UPLOAD_LOCATION={{ immich_upload_location }}
+# The location where your database files are stored
+DB_DATA_LOCATION={{ immich_database_location }}
+
+# To set a timezone, uncomment the next line and change Etc/UTC to a TZ identifier from this list: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List
+TZ=Europe/Amsterdam
+
+# The Immich version to use. You can pin this to a specific version like "v1.71.0"
+IMMICH_VERSION={{ immich_version }}
+
+# Connection secret for postgres. You should change it to a random password
+# Please use only the characters `A-Za-z0-9`, without special characters or spaces
+DB_PASSWORD={{ immich_db_password }}
+
+# The values below this line do not need to be changed
+###################################################################################
+DB_USERNAME=postgres
+DB_DATABASE_NAME=immich

roles/immich/vars/main/defaults.yml

@@ -0,0 +1,4 @@
+---
+immich_version: v1.123.0
+immich_upload_location: '/bulk/immich_uploads'
+immich_database_location: '/bulk/immich_database'

roles/immich/vars/main/vault.yml

@@ -0,0 +1,9 @@
+$ANSIBLE_VAULT;1.1;AES256
+33353064353838383033313436653938346564646230663664623161616137656435616537366134
+3265343666363365633732666338656435373366383137630a393934623635373738333733646239
+36303033626164663539363438313837663166346363663834616335386537643263343366333264
+3365636133663036350a616230626362366134633437373164383966613131346137653138396464
+64313866353438373338633232363763323430643036633431346263373335346536326330613331
+62366137356530356138616636393337663661373865343436353938663039663462353263656365
+65643837663065623364646538636465366134616462316262646431633338383830356236343463
+35663739353062306261